CVE-2024-52312
data.all authenticated users can perform restricted operations against DataSets and Environments
概要
data.all authenticated users can perform restricted operations against DataSets and Environments
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Due to inconsistent authorization permissions, data.all may allow an external actor with an authenticated account to perform restricted operations against DataSets and Environments.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory aws.amazon.com
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com